DNSSEC Debugger - www.bea.gov

Domain Name:

Time: 2024-05-18 04:54:56 UTC

Analyzing DNSSEC problems for www.bea.gov

DS=20326/SHA-256 is now in the chain-of-trust

	Checking DS between Trust Anchor and .
	`. IN DS ( 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d )`
	Query to c.root-servers.net for ./DNSKEY
	Received 865 bytes from 192.33.4.12
	;; Response received from [192.33.4.12] 865 octets ;; HEADER SECTION ;; id = 15756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; . IN DNSKEY ;; ANSWER SECTION (3 records) . 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613 . 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326 . 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for .
	`. 172800 IN DNSKEY ( 256 3 8 AwEAAZBALoOFImwcJJg9Iu7Vy7ZyLjhtXfvO1c9k4vHjOpf9i7U1kKtrBvhnwsOni1sb50gkUayR tMDTUQqvljMMf4bpkyEtcE5evCzhHbFLq1coL5QOix3mfJm++FvIMaAt52nOvAdqR/luuI11bA1A mSCIJKAUx147DcfOHYKg3as+dznn3Iah4cWBMVzDe7PPsFS1AO6gU8EpmiRJ9VMNA09fOyDuq9+d 6sw8UUnJRMAFAuPLhUFjUAOuWOw74BC9lOtMQpbLMz8pX0CDKdOXDHjyj61nxSSWxPdUjeoxI17l QTpSPRtqRHFn5Fgj2e+9BVwhhWGDQN8kUVSJHZtQiI0= ) ; Key ID = 5613`
	`. 172800 IN DNSKEY ( 257 3 8 AwEAAaz/tAm8yTn4Mfeh5eyI96WSVexTBAvkMgJzkKTOiW1vkIbzxeF3+/4RgWOq7HrxRixHlFlE xOLAJr5emLvN7SWXgnLh4+B5xQlNVz8Og8kvArMtNROxVQuCaSnIDdD5LKyWbRd2n9WGe2R8PzgC mr3EgVLrjyBxWezF0jLHwVN8efS3rCj/EWgvIWgb9tarpVUDK/b58Da+sqqls3eNbuv7pr+eoZG+ SrDK6nWeL3c6H5Apxz7LjVc1uTIdsIXxuOLYA4/ilBmSVIzuDWfdRUfhHdY6+cn8HFRm+2hM8AnX GXws9555KrUB5qihylGa8subX2Nn6UwNR1AkUTV74bU= ) ; Key ID = 20326`
	DNSKEY=20326/SEP is now in the chain-of-trust
	DS=20326/SHA-256 verifies DNSKEY=20326/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`. 172800 IN RRSIG ( DNSKEY 8 0 172800 20240601000000 20240511000000 20326 . OgCibhptSNJS9XS2WD2CXYw0HsdjPXn82iYAtzkE7ma1H2BfchG8nRnFZJ9fbrCjXAhDPnKCkuId 8cuJ2PGuLzy9Q3d4zIt7Ow5o8YkpKGEJB6uVi1BRauxVzKgH7u5QnKf8d1AlKFikFdBHHLaZ97XG ci02qRRm1jpe+aY4sLnKHx1kTJozHJp+Xaml/nCiS4AXrCxNyc4EH2/oraODfaewFIOQjpsAMeAw tPrccpst4ZL/9jmZUdRSs3IHwMk9gvSwpZI0YVBWZocKg96CmQQgq9NNNGhpI5gXXdbP++bu4myT GIx8wR1vjK7nau9GJK+76Bt4bc+1FIfpq4mbSg== )`
	RRSIG=20326 and DNSKEY=20326/SEP verifies the DNSKEY RRset
	DNSKEY=5613 is now in the chain-of-trust
	Query to i.root-servers.net for www.bea.gov/A
	Received 624 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 624 octets ;; HEADER SECTION ;; id = 1810 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.bea.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530200000 20240517190000 5613 . Cw18lsPQMAJFVjnATUs/gspFXo0oM65twFIqtJQkWEGawM4KyGvuq0z1pUSy7jdcKHVnnoQRI/YZ SBz6ZaWNzFmi0qWnxAR7fKW8vNHueGCU7QvtB2cksDk2u6CWQvvZn2bKwg3sbbEA68D4lsZt012J V4Mil8iqm0ogeUtw+lQVMTGRku6lyUr6b2AgLlsa+RNZHpkNjudVwh/Jn/v05yeLeKEcWzSh9Bbp EFiRliV/phrNrGvGmYOC1n5jw+ivovBJjIsB/bCA1sC/RT40oTQXDMScUx0JZ6QfAelqQLwc1Y+f tGKnxSWCrRI1BLYqWT0qNhdA7IScVeRNvfwP/Q== ) ;; ADDITIONAL SECTION (9 records) d.ns.gov. 172800 IN A 199.33.233.1 c.ns.gov. 172800 IN A 199.33.232.1 b.ns.gov. 172800 IN A 199.33.231.1 a.ns.gov. 172800 IN A 199.33.230.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 ;; { "EDNS-VERSION": 0 }
	Query to l.root-servers.net for gov/DNSKEY
	Received 610 bytes from 199.7.83.42
	;; Response received from [199.7.83.42] 610 octets ;; HEADER SECTION ;; id = 31773 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 9 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) gov. 172800 IN NS a.ns.gov. gov. 172800 IN NS b.ns.gov. gov. 172800 IN NS c.ns.gov. gov. 172800 IN NS d.ns.gov. gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530200000 20240517190000 5613 . Cw18lsPQMAJFVjnATUs/gspFXo0oM65twFIqtJQkWEGawM4KyGvuq0z1pUSy7jdcKHVnnoQRI/YZ SBz6ZaWNzFmi0qWnxAR7fKW8vNHueGCU7QvtB2cksDk2u6CWQvvZn2bKwg3sbbEA68D4lsZt012J V4Mil8iqm0ogeUtw+lQVMTGRku6lyUr6b2AgLlsa+RNZHpkNjudVwh/Jn/v05yeLeKEcWzSh9Bbp EFiRliV/phrNrGvGmYOC1n5jw+ivovBJjIsB/bCA1sC/RT40oTQXDMScUx0JZ6QfAelqQLwc1Y+f tGKnxSWCrRI1BLYqWT0qNhdA7IScVeRNvfwP/Q== ) ;; ADDITIONAL SECTION (9 records) a.ns.gov. 172800 IN A 199.33.230.1 a.ns.gov. 172800 IN AAAA 2001:503:ff40::1 b.ns.gov. 172800 IN A 199.33.231.1 b.ns.gov. 172800 IN AAAA 2001:503:ff41::1 c.ns.gov. 172800 IN A 199.33.232.1 c.ns.gov. 172800 IN AAAA 2001:503:ff42::1 d.ns.gov. 172800 IN A 199.33.233.1 d.ns.gov. 172800 IN AAAA 2001:503:ff43::1 ;; { "EDNS-VERSION": 0 }
	Found child zone gov

gov

	Checking DS between . and gov
	Query to h.root-servers.net for gov/DS
	Received 367 bytes from 198.97.190.53
	;; Response received from [198.97.190.53] 367 octets ;; HEADER SECTION ;; id = 53186 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DS ;; ANSWER SECTION (2 records) gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 ) gov. 86400 IN RRSIG ( DS 8 1 86400 20240530200000 20240517190000 5613 . Cw18lsPQMAJFVjnATUs/gspFXo0oM65twFIqtJQkWEGawM4KyGvuq0z1pUSy7jdcKHVnnoQRI/YZ SBz6ZaWNzFmi0qWnxAR7fKW8vNHueGCU7QvtB2cksDk2u6CWQvvZn2bKwg3sbbEA68D4lsZt012J V4Mil8iqm0ogeUtw+lQVMTGRku6lyUr6b2AgLlsa+RNZHpkNjudVwh/Jn/v05yeLeKEcWzSh9Bbp EFiRliV/phrNrGvGmYOC1n5jw+ivovBJjIsB/bCA1sC/RT40oTQXDMScUx0JZ6QfAelqQLwc1Y+f tGKnxSWCrRI1BLYqWT0qNhdA7IScVeRNvfwP/Q== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for gov in the . zone
	DS=64280/SHA-256 has algorithm RSASHA256
	Found 1 RRSIGs over DS RRset
	`gov. 86400 IN RRSIG ( DS 8 1 86400 20240530200000 20240517190000 5613 . Cw18lsPQMAJFVjnATUs/gspFXo0oM65twFIqtJQkWEGawM4KyGvuq0z1pUSy7jdcKHVnnoQRI/YZ SBz6ZaWNzFmi0qWnxAR7fKW8vNHueGCU7QvtB2cksDk2u6CWQvvZn2bKwg3sbbEA68D4lsZt012J V4Mil8iqm0ogeUtw+lQVMTGRku6lyUr6b2AgLlsa+RNZHpkNjudVwh/Jn/v05yeLeKEcWzSh9Bbp EFiRliV/phrNrGvGmYOC1n5jw+ivovBJjIsB/bCA1sC/RT40oTQXDMScUx0JZ6QfAelqQLwc1Y+f tGKnxSWCrRI1BLYqWT0qNhdA7IScVeRNvfwP/Q== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=64280/SHA-256 is now in the chain-of-trust
	`gov. 86400 IN DS ( 64280 8 2 d66cdda12234c22c5e6fd1c894dbd682fe7967e111793485a281972bfb164377 )`
	Query to b.ns.gov for gov/DNSKEY
	Received 779 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 779 octets ;; HEADER SECTION ;; id = 35674 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov. IN DNSKEY ;; ANSWER SECTION (3 records) gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280 gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104 gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for gov
	`gov. 3600 IN DNSKEY ( 257 3 8 AwEAAZp0vliR0TOBCJXmdagY36BI5ZveSPE3OSrcXKDs8IZa86x1+gwbheJcfLB6Fw6cWYUXaNgA mFcbxqIqWc5VJSyPS9yCPdEOLEIiegwCmcWnNsEyc0snKTyypXnvJ5JNhoznpFILDqlksAqP/aiq 1/l0w8TMkRbRrViLrJ1ayaScZ0nn/ge5wNpX09T9RI+gF1OIMJDdgH1vi0a+t6smSy4pUrerFTsu y8JAL+PP85MZiOssT9yoERfWSjFKde6PrQX5vj090AxT+hztb+q2EFXnF1a2L73/3UarB19k5NR3 MT1uM7ddag64Q0lg3aTy3MglDCzP7/StUxdeyL5qIX8= ) ; Key ID = 64280`
	`gov. 3600 IN DNSKEY ( 256 3 8 AwEAAcbYvlY667qXEzHsDTkft9cgKy5F0S9CAP+aFK9+sJumGqvpMaOyOzsilJ+OSVFhopJ1aRFp CUpLVIcVJ3E3YATGpzB45M0D5c4oJ0RjEIUakBwcPghmSW8K1GPqj/eUs4fbVPytXwtwvUll9Lxf gUvi5DA6xD6d2ckwDyRxfcMhXYydr2hIsgfrBLmRDMi4BkxMvA23eShPd/tPvnR0gJk= ) ; Key ID = 10104`
	DNSKEY=64280/SEP is now in the chain-of-trust
	DS=64280/SHA-256 verifies DNSKEY=64280/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`gov. 3600 IN RRSIG ( DNSKEY 8 1 3600 20240623141047 20240423141047 64280 gov. GGsGHy8XGH2PGTeyVpY5iEmleVzWCH/eitEUBXIgG0ivqrcC6Pzhenn+3E9uz+C2ehYImK95B9PK juJuu0jPFw09gKBO8Xo9x+wpWM/Zdh3NxhzGmfQOxRyj/5e1g27XxQB1pqhRegDfa5/mg+8zAoFY YneUx2tnvdtycsZg49d2iq75YlRBRj9ZSl6PJJ/nzacwKPjQFCbFiuEfnn6Vn432vWr2T0AUuaDV bJCSg2c32qiMCHE18PaaUn82oWYF2/FjWhU9i/UpGd0PS8Wtvicuho7/CYbMv+UvithHF+NE7QFV VDQtgjise03ZFQWMfrZcrZE8W4/KKDeyfDAkFA== )`
	RRSIG=64280 and DNSKEY=64280/SEP verifies the DNSKEY RRset
	DNSKEY=10104 is now in the chain-of-trust
	Query to d.ns.gov for www.bea.gov/A
	Received 415 bytes from 199.33.233.1
	;; Response received from [199.33.233.1] 415 octets ;; HEADER SECTION ;; id = 18387 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.bea.gov. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) bea.gov. 10800 IN NS a1-195.akam.net. bea.gov. 10800 IN NS a11-67.akam.net. bea.gov. 10800 IN NS a12-67.akam.net. bea.gov. 10800 IN NS a2-64.akam.net. bea.gov. 10800 IN NS a24-66.akam.net. bea.gov. 10800 IN NS a7-64.akam.net. bea.gov. 3600 IN DS ( 27372 13 2 249e3582f4fd5f6c08f1e710eb766469118fc1083dc33aad9a93284e017cad28 ) bea.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519055456 20240517035456 10104 gov. NS7M9txJc2A/e23E2vU/wJZ9V3SOF0650i/yH4lT6vW9mo703dqH83sefYIqGWutvToq1lfCiUL9 2Rb/pgJmcStd5N3S0ec59SK3iN22JeAf9wL409ZUXITDPDKLKEZaWFnf0qaemEYp7STRvPIoc6Tp O2WkU9tpWpJxIuLaRZj3n89QK4ZVSwJkxcN6rcYCUXcQALuxJI7ykrD2YePsuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to c.ns.gov for bea.gov/DNSKEY
	Received 411 bytes from 199.33.232.1
	;; Response received from [199.33.232.1] 411 octets ;; HEADER SECTION ;; id = 2787 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bea.gov. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) bea.gov. 10800 IN NS a1-195.akam.net. bea.gov. 10800 IN NS a11-67.akam.net. bea.gov. 10800 IN NS a12-67.akam.net. bea.gov. 10800 IN NS a2-64.akam.net. bea.gov. 10800 IN NS a24-66.akam.net. bea.gov. 10800 IN NS a7-64.akam.net. bea.gov. 3600 IN DS ( 27372 13 2 249e3582f4fd5f6c08f1e710eb766469118fc1083dc33aad9a93284e017cad28 ) bea.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519055456 20240517035456 10104 gov. NS7M9txJc2A/e23E2vU/wJZ9V3SOF0650i/yH4lT6vW9mo703dqH83sefYIqGWutvToq1lfCiUL9 2Rb/pgJmcStd5N3S0ec59SK3iN22JeAf9wL409ZUXITDPDKLKEZaWFnf0qaemEYp7STRvPIoc6Tp O2WkU9tpWpJxIuLaRZj3n89QK4ZVSwJkxcN6rcYCUXcQALuxJI7ykrD2YePsuQ== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found child zone bea.gov

bea.gov

	Checking DS between gov and bea.gov
	Query to b.ns.gov for bea.gov/DS
	Received 279 bytes from 199.33.231.1
	;; Response received from [199.33.231.1] 279 octets ;; HEADER SECTION ;; id = 62790 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bea.gov. IN DS ;; ANSWER SECTION (2 records) bea.gov. 3600 IN DS ( 27372 13 2 249e3582f4fd5f6c08f1e710eb766469118fc1083dc33aad9a93284e017cad28 ) bea.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519055456 20240517035456 10104 gov. NS7M9txJc2A/e23E2vU/wJZ9V3SOF0650i/yH4lT6vW9mo703dqH83sefYIqGWutvToq1lfCiUL9 2Rb/pgJmcStd5N3S0ec59SK3iN22JeAf9wL409ZUXITDPDKLKEZaWFnf0qaemEYp7STRvPIoc6Tp O2WkU9tpWpJxIuLaRZj3n89QK4ZVSwJkxcN6rcYCUXcQALuxJI7ykrD2YePsuQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for bea.gov in the gov zone
	DS=27372/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`bea.gov. 3600 IN RRSIG ( DS 8 2 3600 20240519055456 20240517035456 10104 gov. NS7M9txJc2A/e23E2vU/wJZ9V3SOF0650i/yH4lT6vW9mo703dqH83sefYIqGWutvToq1lfCiUL9 2Rb/pgJmcStd5N3S0ec59SK3iN22JeAf9wL409ZUXITDPDKLKEZaWFnf0qaemEYp7STRvPIoc6Tp O2WkU9tpWpJxIuLaRZj3n89QK4ZVSwJkxcN6rcYCUXcQALuxJI7ykrD2YePsuQ== )`
	RRSIG=10104 and DNSKEY=10104 verifies the DS RRset
	DS=27372/SHA-256 is now in the chain-of-trust
	`bea.gov. 3600 IN DS ( 27372 13 2 249e3582f4fd5f6c08f1e710eb766469118fc1083dc33aad9a93284e017cad28 )`
	Query to a1-195.akam.net for bea.gov/DNSKEY
	Received 379 bytes from 193.108.91.195
	;; Response received from [193.108.91.195] 379 octets ;; HEADER SECTION ;; id = 27118 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 4 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bea.gov. IN DNSKEY ;; ANSWER SECTION (4 records) bea.gov. 7200 IN DNSKEY ( 257 3 13 ovwES0Fyd56yHWeMrQcgjK/ly4xWQ45C4mQd/6sNX3lxT11qUhlxtYAdkdTEQm/BRZofV14nzbuW 5bHvx7o6gQ== ) ; Key ID = 27372 bea.gov. 7200 IN DNSKEY ( 256 3 13 VMWsHIzu7aCCl2iHmf+mtUkmYTLmB0OeIW91XjSMpLol/fKlMBwCvVd2nNPFQ4v0ZjnkvJ1ItxG5 Aa1siH7Q1g== ) ; Key ID = 57208 bea.gov. 7200 IN DNSKEY ( 256 3 13 s6BDRLQOIiaHm4OOX8IhgTqDvr+KTQKdSQ3sdowYAlmdRLi1m/yzYqRPQ6LamrIoyosPeFOLcFVA lrWB7G3hdQ== ) ; Key ID = 9127 bea.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240521014854 20240518004854 27372 bea.gov. RvJbE7Pp4UO7liFM4/JWjJB8QDGjky5vQbvnR3D/hw9HxWbx90vLEZ2LPH6K+cze6jQoQYG0rSTd 7WnkxcXGdg== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 3 DNSKEY records for bea.gov
	`bea.gov. 7200 IN DNSKEY ( 257 3 13 ovwES0Fyd56yHWeMrQcgjK/ly4xWQ45C4mQd/6sNX3lxT11qUhlxtYAdkdTEQm/BRZofV14nzbuW 5bHvx7o6gQ== ) ; Key ID = 27372`
	`bea.gov. 7200 IN DNSKEY ( 256 3 13 VMWsHIzu7aCCl2iHmf+mtUkmYTLmB0OeIW91XjSMpLol/fKlMBwCvVd2nNPFQ4v0ZjnkvJ1ItxG5 Aa1siH7Q1g== ) ; Key ID = 57208`
	`bea.gov. 7200 IN DNSKEY ( 256 3 13 s6BDRLQOIiaHm4OOX8IhgTqDvr+KTQKdSQ3sdowYAlmdRLi1m/yzYqRPQ6LamrIoyosPeFOLcFVA lrWB7G3hdQ== ) ; Key ID = 9127`
	DNSKEY=27372/SEP is now in the chain-of-trust
	DS=27372/SHA-256 verifies DNSKEY=27372/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`bea.gov. 7200 IN RRSIG ( DNSKEY 13 2 7200 20240521014854 20240518004854 27372 bea.gov. RvJbE7Pp4UO7liFM4/JWjJB8QDGjky5vQbvnR3D/hw9HxWbx90vLEZ2LPH6K+cze6jQoQYG0rSTd 7WnkxcXGdg== )`
	RRSIG=27372 and DNSKEY=27372/SEP verifies the DNSKEY RRset
	DNSKEY=57208 is now in the chain-of-trust
	DNSKEY=9127 is now in the chain-of-trust
	Query to a1-195.akam.net for www.bea.gov/A
	Received 185 bytes from 193.108.91.195
	;; Response received from [193.108.91.195] 185 octets ;; HEADER SECTION ;; id = 56150 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.bea.gov. IN A ;; ANSWER SECTION (2 records) www.bea.gov. 300 IN CNAME www.bea.gov-v1.edgesuite.net. www.bea.gov. 300 IN RRSIG ( CNAME 13 3 300 20240521014854 20240518004854 9127 bea.gov. //iz4EAo6GyrnMaA0SqNXrelVtafg4zgwpei7+ZCo9ZBE8db5txSKRmipAq5xqinP9NgJO1xCq8f J7CP8kK9NQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1-195.akam.net is authoritative for www.bea.gov
	Query to a11-67.akam.net for www.bea.gov/DNSKEY
	Received 185 bytes from 84.53.139.67
	;; Response received from [84.53.139.67] 185 octets ;; HEADER SECTION ;; id = 35694 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.bea.gov. IN DNSKEY ;; ANSWER SECTION (2 records) www.bea.gov. 300 IN CNAME www.bea.gov-v1.edgesuite.net. www.bea.gov. 300 IN RRSIG ( CNAME 13 3 300 20240521014854 20240518004854 9127 bea.gov. //iz4EAo6GyrnMaA0SqNXrelVtafg4zgwpei7+ZCo9ZBE8db5txSKRmipAq5xqinP9NgJO1xCq8f J7CP8kK9NQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found RRSIG signed by bea.gov zone
	www.bea.gov is a CNAME to www.bea.gov-v1.edgesuite.net
	Found 1 RRSIGs over CNAME RRset
	`www.bea.gov. 300 IN RRSIG ( CNAME 13 3 300 20240521014854 20240518004854 9127 bea.gov. //iz4EAo6GyrnMaA0SqNXrelVtafg4zgwpei7+ZCo9ZBE8db5txSKRmipAq5xqinP9NgJO1xCq8f J7CP8kK9NQ== )`
	RRSIG=9127 and DNSKEY=9127 verifies the CNAME RRset

	Query to m.root-servers.net for www.bea.gov-v1.edgesuite.net/A
	Received 1191 bytes from 202.12.27.33
	;; Response received from [202.12.27.33] 1191 octets ;; HEADER SECTION ;; id = 48118 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.bea.gov-v1.edgesuite.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240530200000 20240517190000 5613 . PfeoM5TS/JBaRgsL3D9PwN7p18GaGJnKhhxT/eNc7G8bsf96bBCYMD2jNju7C+n6wdTQUQyu9JiT FDJuuU+hUrTr0s9DdbUUW74B8cFUc+bcEPGpwMIyQHqAbVcibez9bnw5OA0DzsHjKlUuCToX7SAq VJGmcoCq1LZFfzGvWu1kg/4hqxPlGJ+YxkX1yp69FGy5ZgvPL31Sxmq8POTC9CC/Tyz9HfOzeiw2 bpNvDhxflY6wP898aqrQD4YWMReOukzNvf3vI4VvmF6Kubx0Q3g42VGSaV2gR9G/P5q/X5lWEdbw TI159YQSPx2+Q0zFCC2zblPazUXSKuluagMh0g== ) ;; ADDITIONAL SECTION (27 records) m.gtld-servers.net. 172800 IN A 192.55.83.30 l.gtld-servers.net. 172800 IN A 192.41.162.30 k.gtld-servers.net. 172800 IN A 192.52.178.30 j.gtld-servers.net. 172800 IN A 192.48.79.30 i.gtld-servers.net. 172800 IN A 192.43.172.30 h.gtld-servers.net. 172800 IN A 192.54.112.30 g.gtld-servers.net. 172800 IN A 192.42.93.30 f.gtld-servers.net. 172800 IN A 192.35.51.30 e.gtld-servers.net. 172800 IN A 192.12.94.30 d.gtld-servers.net. 172800 IN A 192.31.80.30 c.gtld-servers.net. 172800 IN A 192.26.92.30 b.gtld-servers.net. 172800 IN A 192.33.14.30 a.gtld-servers.net. 172800 IN A 192.5.6.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 ;; { "EDNS-VERSION": 0 }
	Query to f.root-servers.net for net/DNSKEY
	Received 1160 bytes from 192.5.5.241
	;; Response received from [192.5.5.241] 1160 octets ;; HEADER SECTION ;; id = 28518 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 15 arcount = 27 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1472, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (15 records) net. 172800 IN NS e.gtld-servers.net. net. 172800 IN NS a.gtld-servers.net. net. 172800 IN NS i.gtld-servers.net. net. 172800 IN NS d.gtld-servers.net. net. 172800 IN NS j.gtld-servers.net. net. 172800 IN NS f.gtld-servers.net. net. 172800 IN NS b.gtld-servers.net. net. 172800 IN NS k.gtld-servers.net. net. 172800 IN NS c.gtld-servers.net. net. 172800 IN NS g.gtld-servers.net. net. 172800 IN NS h.gtld-servers.net. net. 172800 IN NS l.gtld-servers.net. net. 172800 IN NS m.gtld-servers.net. net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240530200000 20240517190000 5613 . PfeoM5TS/JBaRgsL3D9PwN7p18GaGJnKhhxT/eNc7G8bsf96bBCYMD2jNju7C+n6wdTQUQyu9JiT FDJuuU+hUrTr0s9DdbUUW74B8cFUc+bcEPGpwMIyQHqAbVcibez9bnw5OA0DzsHjKlUuCToX7SAq VJGmcoCq1LZFfzGvWu1kg/4hqxPlGJ+YxkX1yp69FGy5ZgvPL31Sxmq8POTC9CC/Tyz9HfOzeiw2 bpNvDhxflY6wP898aqrQD4YWMReOukzNvf3vI4VvmF6Kubx0Q3g42VGSaV2gR9G/P5q/X5lWEdbw TI159YQSPx2+Q0zFCC2zblPazUXSKuluagMh0g== ) ;; ADDITIONAL SECTION (27 records) e.gtld-servers.net. 172800 IN A 192.12.94.30 e.gtld-servers.net. 172800 IN AAAA 2001:502:1ca1::30 a.gtld-servers.net. 172800 IN A 192.5.6.30 a.gtld-servers.net. 172800 IN AAAA 2001:503:a83e::2:30 i.gtld-servers.net. 172800 IN A 192.43.172.30 i.gtld-servers.net. 172800 IN AAAA 2001:503:39c1::30 d.gtld-servers.net. 172800 IN A 192.31.80.30 d.gtld-servers.net. 172800 IN AAAA 2001:500:856e::30 j.gtld-servers.net. 172800 IN A 192.48.79.30 j.gtld-servers.net. 172800 IN AAAA 2001:502:7094::30 f.gtld-servers.net. 172800 IN A 192.35.51.30 f.gtld-servers.net. 172800 IN AAAA 2001:503:d414::30 b.gtld-servers.net. 172800 IN A 192.33.14.30 b.gtld-servers.net. 172800 IN AAAA 2001:503:231d::2:30 k.gtld-servers.net. 172800 IN A 192.52.178.30 k.gtld-servers.net. 172800 IN AAAA 2001:503:d2d::30 c.gtld-servers.net. 172800 IN A 192.26.92.30 c.gtld-servers.net. 172800 IN AAAA 2001:503:83eb::30 g.gtld-servers.net. 172800 IN A 192.42.93.30 g.gtld-servers.net. 172800 IN AAAA 2001:503:eea3::30 h.gtld-servers.net. 172800 IN A 192.54.112.30 h.gtld-servers.net. 172800 IN AAAA 2001:502:8cc::30 l.gtld-servers.net. 172800 IN A 192.41.162.30 l.gtld-servers.net. 172800 IN AAAA 2001:500:d937::30 m.gtld-servers.net. 172800 IN A 192.55.83.30 m.gtld-servers.net. 172800 IN AAAA 2001:501:b1f9::30 ;; { "EDNS-VERSION": 0 }
	Found child zone net

net

	Checking DS between . and net
	Query to i.root-servers.net for net/DS
	Received 367 bytes from 192.36.148.17
	;; Response received from [192.36.148.17] 367 octets ;; HEADER SECTION ;; id = 35945 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 1232, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DS ;; ANSWER SECTION (2 records) net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b ) net. 86400 IN RRSIG ( DS 8 1 86400 20240530200000 20240517190000 5613 . PfeoM5TS/JBaRgsL3D9PwN7p18GaGJnKhhxT/eNc7G8bsf96bBCYMD2jNju7C+n6wdTQUQyu9JiT FDJuuU+hUrTr0s9DdbUUW74B8cFUc+bcEPGpwMIyQHqAbVcibez9bnw5OA0DzsHjKlUuCToX7SAq VJGmcoCq1LZFfzGvWu1kg/4hqxPlGJ+YxkX1yp69FGy5ZgvPL31Sxmq8POTC9CC/Tyz9HfOzeiw2 bpNvDhxflY6wP898aqrQD4YWMReOukzNvf3vI4VvmF6Kubx0Q3g42VGSaV2gR9G/P5q/X5lWEdbw TI159YQSPx2+Q0zFCC2zblPazUXSKuluagMh0g== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 1 DS records for net in the . zone
	DS=37331/SHA-256 has algorithm ECDSAP256SHA256
	Found 1 RRSIGs over DS RRset
	`net. 86400 IN RRSIG ( DS 8 1 86400 20240530200000 20240517190000 5613 . PfeoM5TS/JBaRgsL3D9PwN7p18GaGJnKhhxT/eNc7G8bsf96bBCYMD2jNju7C+n6wdTQUQyu9JiT FDJuuU+hUrTr0s9DdbUUW74B8cFUc+bcEPGpwMIyQHqAbVcibez9bnw5OA0DzsHjKlUuCToX7SAq VJGmcoCq1LZFfzGvWu1kg/4hqxPlGJ+YxkX1yp69FGy5ZgvPL31Sxmq8POTC9CC/Tyz9HfOzeiw2 bpNvDhxflY6wP898aqrQD4YWMReOukzNvf3vI4VvmF6Kubx0Q3g42VGSaV2gR9G/P5q/X5lWEdbw TI159YQSPx2+Q0zFCC2zblPazUXSKuluagMh0g== )`
	RRSIG=5613 and DNSKEY=5613 verifies the DS RRset
	DS=37331/SHA-256 is now in the chain-of-trust
	`net. 86400 IN DS ( 37331 13 2 2f0bec2d6f79dfbd1d08fd21a3af92d0e39a4b9ef1e3f4111fff282490da453b )`
	Query to g.gtld-servers.net for net/DNSKEY
	Received 291 bytes from 192.42.93.30
	;; Response received from [192.42.93.30] 291 octets ;; HEADER SECTION ;; id = 19590 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 3 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; net. IN DNSKEY ;; ANSWER SECTION (3 records) net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809 net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331 net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Found 2 DNSKEY records for net
	`net. 86400 IN DNSKEY ( 256 3 13 56fSEr8Q2Bl/n3F1QOjcCUqKU1NITVCsZWfKkLiIhbMCsJXeLnuqEL45zAjYm7yZtSZjzguugrN5 1pay45GWWA== ) ; Key ID = 51809`
	`net. 86400 IN DNSKEY ( 257 3 13 HiBoGpzDRAgrDmUXXTSnl7jCX6Hx5bzkU2jSxMbVI01yS+13EyOghnCidBXU0bH2gi2w9GhYGacp U6CrtwoFNg== ) ; Key ID = 37331`
	DNSKEY=37331/SEP is now in the chain-of-trust
	DS=37331/SHA-256 verifies DNSKEY=37331/SEP
	Found 1 RRSIGs over DNSKEY RRset
	`net. 86400 IN RRSIG ( DNSKEY 13 1 86400 20240601141035 20240517140535 37331 net. qOsooWR4HrL/Zbm95bWfpBIngzRM74y8DLX7uZfytCQcZSOaZ+MDuCi6fbfCeSMOCYJIKQa/9mqM EJPgfV1SJQ== )`
	RRSIG=37331 and DNSKEY=37331/SEP verifies the DNSKEY RRset
	DNSKEY=51809 is now in the chain-of-trust
	Query to b.gtld-servers.net for www.bea.gov-v1.edgesuite.net/A
	Received 935 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 935 octets ;; HEADER SECTION ;; id = 31726 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.bea.gov-v1.edgesuite.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgesuite.net. 172800 IN NS a1-2.akam.net. edgesuite.net. 172800 IN NS a12-64.akam.net. edgesuite.net. 172800 IN NS a9-65.akam.net. edgesuite.net. 172800 IN NS a28-64.akam.net. edgesuite.net. 172800 IN NS a6-64.akam.net. edgesuite.net. 172800 IN NS a14-67.akam.net. edgesuite.net. 172800 IN NS a24-64.akam.net. edgesuite.net. 172800 IN NS a18-64.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524065236 20240517054236 51809 net. WfKyMoQ6R04dwcyNmh/YG1Ahb8qSMGECDggXbDdcPJUeqXjLoB4NgGg/1+ev6NKoM1tuv6GY6Czt qp6vxijRZw== ) B5JJD28MFHK2QEO58RNOOJNF8S5LOI6T.net. 86400 IN NSEC3 ( 1 1 0 - b5jo2nu7l5dgkq0jvrubr7tffki5kjn0 NS DS RRSIG ) B5JJD28MFHK2QEO58RNOOJNF8S5LOI6T.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524064601 20240517053601 51809 net. e0Em5IY9XsUWMSjVxGqd+Am122TSb4CGWs2LGUwcf3N2sfayk2RXyDjLgpYeHrlRGET973HLt0C0 feFvT7AB7Q== ) ;; ADDITIONAL SECTION (17 records) a1-2.akam.net. 172800 IN A 193.108.91.2 a1-2.akam.net. 172800 IN AAAA 2600:1401:2::2 a12-64.akam.net. 172800 IN A 184.26.160.64 a12-64.akam.net. 172800 IN AAAA 2600:1480:f000::40 a9-65.akam.net. 172800 IN A 184.85.248.65 a9-65.akam.net. 172800 IN AAAA 2a02:26f0:117::41 a28-64.akam.net. 172800 IN AAAA 2600:1480:d800::40 a28-64.akam.net. 172800 IN A 95.100.173.64 a6-64.akam.net. 172800 IN A 23.211.133.64 a6-64.akam.net. 172800 IN AAAA 2600:1401:1::40 a14-67.akam.net. 172800 IN A 184.26.161.67 a14-67.akam.net. 172800 IN AAAA 2600:1480:1800::43 a24-64.akam.net. 172800 IN A 2.16.130.64 a24-64.akam.net. 172800 IN AAAA 2600:1480:9800::40 a18-64.akam.net. 172800 IN AAAA 2600:1480:4800::40 a18-64.akam.net. 172800 IN A 95.101.36.64 ;; { "EDNS-VERSION": 0 }
	Query to g.gtld-servers.net for edgesuite.net/DNSKEY
	Received 920 bytes from 192.42.93.30
	;; Response received from [192.42.93.30] 920 octets ;; HEADER SECTION ;; id = 59694 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 17 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgesuite.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) edgesuite.net. 172800 IN NS a1-2.akam.net. edgesuite.net. 172800 IN NS a12-64.akam.net. edgesuite.net. 172800 IN NS a9-65.akam.net. edgesuite.net. 172800 IN NS a28-64.akam.net. edgesuite.net. 172800 IN NS a6-64.akam.net. edgesuite.net. 172800 IN NS a14-67.akam.net. edgesuite.net. 172800 IN NS a24-64.akam.net. edgesuite.net. 172800 IN NS a18-64.akam.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524065236 20240517054236 51809 net. WfKyMoQ6R04dwcyNmh/YG1Ahb8qSMGECDggXbDdcPJUeqXjLoB4NgGg/1+ev6NKoM1tuv6GY6Czt qp6vxijRZw== ) B5JJD28MFHK2QEO58RNOOJNF8S5LOI6T.net. 86400 IN NSEC3 ( 1 1 0 - b5jo2nu7l5dgkq0jvrubr7tffki5kjn0 NS DS RRSIG ) B5JJD28MFHK2QEO58RNOOJNF8S5LOI6T.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524064601 20240517053601 51809 net. e0Em5IY9XsUWMSjVxGqd+Am122TSb4CGWs2LGUwcf3N2sfayk2RXyDjLgpYeHrlRGET973HLt0C0 feFvT7AB7Q== ) ;; ADDITIONAL SECTION (17 records) a1-2.akam.net. 172800 IN A 193.108.91.2 a1-2.akam.net. 172800 IN AAAA 2600:1401:2::2 a12-64.akam.net. 172800 IN A 184.26.160.64 a12-64.akam.net. 172800 IN AAAA 2600:1480:f000::40 a9-65.akam.net. 172800 IN A 184.85.248.65 a9-65.akam.net. 172800 IN AAAA 2a02:26f0:117::41 a28-64.akam.net. 172800 IN AAAA 2600:1480:d800::40 a28-64.akam.net. 172800 IN A 95.100.173.64 a6-64.akam.net. 172800 IN A 23.211.133.64 a6-64.akam.net. 172800 IN AAAA 2600:1401:1::40 a14-67.akam.net. 172800 IN A 184.26.161.67 a14-67.akam.net. 172800 IN AAAA 2600:1480:1800::43 a24-64.akam.net. 172800 IN A 2.16.130.64 a24-64.akam.net. 172800 IN AAAA 2600:1480:9800::40 a18-64.akam.net. 172800 IN AAAA 2600:1480:4800::40 a18-64.akam.net. 172800 IN A 95.101.36.64 ;; { "EDNS-VERSION": 0 }
	Found child zone edgesuite.net

edgesuite.net

	Checking DS between net and edgesuite.net
	Query to c.gtld-servers.net for edgesuite.net/DS
	Received 571 bytes from 192.26.92.30
	;; Response received from [192.26.92.30] 571 octets ;; HEADER SECTION ;; id = 30178 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgesuite.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524065236 20240517054236 51809 net. WfKyMoQ6R04dwcyNmh/YG1Ahb8qSMGECDggXbDdcPJUeqXjLoB4NgGg/1+ev6NKoM1tuv6GY6Czt qp6vxijRZw== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1716008084 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20240525045444 20240518034444 51809 net. UTp7/eU3g3x4tNvqaiCt/jy9sDz11azrR1ZRfUsuxfDQCnp2h37VpTnXcM3up1dFZAKuqiQGWafT 798ZeBcg1w== ) B5JJD28MFHK2QEO58RNOOJNF8S5LOI6T.net. 86400 IN NSEC3 ( 1 1 0 - b5jo2nu7l5dgkq0jvrubr7tffki5kjn0 NS DS RRSIG ) B5JJD28MFHK2QEO58RNOOJNF8S5LOI6T.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524064601 20240517053601 51809 net. e0Em5IY9XsUWMSjVxGqd+Am122TSb4CGWs2LGUwcf3N2sfayk2RXyDjLgpYeHrlRGET973HLt0C0 feFvT7AB7Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for edgesuite.net in the net zone
	Query to a1-2.akam.net for edgesuite.net/DNSKEY
	Received 105 bytes from 193.108.91.2
	;; Response received from [193.108.91.2] 105 octets ;; HEADER SECTION ;; id = 35169 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; edgesuite.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgesuite.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579802067 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to a18-64.akam.net for www.bea.gov-v1.edgesuite.net/A
	Received 89 bytes from 95.101.36.64
	;; Response received from [95.101.36.64] 89 octets ;; HEADER SECTION ;; id = 47756 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.bea.gov-v1.edgesuite.net. IN A ;; ANSWER SECTION (1 record) www.bea.gov-v1.edgesuite.net. 21600 IN CNAME a1808.dscb.akamai.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a18-64.akam.net is authoritative for www.bea.gov-v1.edgesuite.net
	Query to a24-64.akam.net for gov-v1.edgesuite.net/DNSKEY
	Received 112 bytes from 2.16.130.64
	;; Response received from [2.16.130.64] 112 octets ;; HEADER SECTION ;; id = 52315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; gov-v1.edgesuite.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgesuite.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579802067 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a1-2.akam.net for bea.gov-v1.edgesuite.net/DNSKEY
	Received 116 bytes from 193.108.91.2
	;; Response received from [193.108.91.2] 116 octets ;; HEADER SECTION ;; id = 42070 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; bea.gov-v1.edgesuite.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) edgesuite.net. 180 IN SOA ( ns1-2.akamai.com. hostmaster.akamai.com. 1579802067 ;serial 900 ;refresh 300 ;retry 604800 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to a6-64.akam.net for www.bea.gov-v1.edgesuite.net/DNSKEY
	Received 89 bytes from 23.211.133.64
	;; Response received from [23.211.133.64] 89 octets ;; HEADER SECTION ;; id = 17292 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; www.bea.gov-v1.edgesuite.net. IN DNSKEY ;; ANSWER SECTION (1 record) www.bea.gov-v1.edgesuite.net. 21600 IN CNAME a1808.dscb.akamai.net. ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	www.bea.gov-v1.edgesuite.net is a CNAME to a1808.dscb.akamai.net
	No RRSIGs found

net

	Query to h.gtld-servers.net for a1808.dscb.akamai.net/A
	Received 751 bytes from 192.54.112.30
	;; Response received from [192.54.112.30] 751 octets ;; HEADER SECTION ;; id = 56149 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamai.net. 172800 IN NS zc.akamaitech.net. akamai.net. 172800 IN NS zd.akamaitech.net. akamai.net. 172800 IN NS ze.akamaitech.net. akamai.net. 172800 IN NS zg.akamaitech.net. akamai.net. 172800 IN NS zh.akamaitech.net. akamai.net. 172800 IN NS ns3-193.akamaitech.net. akamai.net. 172800 IN NS ns4-193.akamaitech.net. akamai.net. 172800 IN NS ns1-1.akamaitech.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524065236 20240517054236 51809 net. WfKyMoQ6R04dwcyNmh/YG1Ahb8qSMGECDggXbDdcPJUeqXjLoB4NgGg/1+ev6NKoM1tuv6GY6Czt qp6vxijRZw== ) FA763KDSUQ0I5B94OID0KSLEO7UOGETS.net. 86400 IN NSEC3 ( 1 1 0 - fa781tlgr08gcs7n94lbdrb309gnnrpb NS DS RRSIG ) FA763KDSUQ0I5B94OID0KSLEO7UOGETS.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240522064522 20240515053522 51809 net. IDcI4wZSq8FyVtk05IHdq0UoP+AM2pqmzZTPdue2FuO7qvYEvbol2hYKQTNH9rotO8MC5JK897Uq Xml/5Kih+Q== ) ;; ADDITIONAL SECTION (11 records) zc.akamaitech.net. 172800 IN A 23.74.25.192 zd.akamaitech.net. 172800 IN A 95.101.36.192 ze.akamaitech.net. 172800 IN A 184.26.161.192 zg.akamaitech.net. 172800 IN A 96.7.50.192 zh.akamaitech.net. 172800 IN A 23.211.133.192 ns3-193.akamaitech.net. 172800 IN A 23.61.199.193 ns3-193.akamaitech.net. 172800 IN AAAA 2600:1406:32::c1 ns4-193.akamaitech.net. 172800 IN AAAA 2600:1480:1::c1 ns4-193.akamaitech.net. 172800 IN A 84.53.139.193 ns1-1.akamaitech.net. 172800 IN A 193.108.88.1 ;; { "EDNS-VERSION": 0 }
	Query to b.gtld-servers.net for akamai.net/DNSKEY
	Received 740 bytes from 192.33.14.30
	;; Response received from [192.33.14.30] 740 octets ;; HEADER SECTION ;; id = 13391 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 12 arcount = 11 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (12 records) akamai.net. 172800 IN NS zc.akamaitech.net. akamai.net. 172800 IN NS zd.akamaitech.net. akamai.net. 172800 IN NS ze.akamaitech.net. akamai.net. 172800 IN NS zg.akamaitech.net. akamai.net. 172800 IN NS zh.akamaitech.net. akamai.net. 172800 IN NS ns3-193.akamaitech.net. akamai.net. 172800 IN NS ns4-193.akamaitech.net. akamai.net. 172800 IN NS ns1-1.akamaitech.net. A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524065236 20240517054236 51809 net. WfKyMoQ6R04dwcyNmh/YG1Ahb8qSMGECDggXbDdcPJUeqXjLoB4NgGg/1+ev6NKoM1tuv6GY6Czt qp6vxijRZw== ) FA763KDSUQ0I5B94OID0KSLEO7UOGETS.net. 86400 IN NSEC3 ( 1 1 0 - fa781tlgr08gcs7n94lbdrb309gnnrpb NS DS RRSIG ) FA763KDSUQ0I5B94OID0KSLEO7UOGETS.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240522064522 20240515053522 51809 net. IDcI4wZSq8FyVtk05IHdq0UoP+AM2pqmzZTPdue2FuO7qvYEvbol2hYKQTNH9rotO8MC5JK897Uq Xml/5Kih+Q== ) ;; ADDITIONAL SECTION (11 records) zc.akamaitech.net. 172800 IN A 23.74.25.192 zd.akamaitech.net. 172800 IN A 95.101.36.192 ze.akamaitech.net. 172800 IN A 184.26.161.192 zg.akamaitech.net. 172800 IN A 96.7.50.192 zh.akamaitech.net. 172800 IN A 23.211.133.192 ns3-193.akamaitech.net. 172800 IN A 23.61.199.193 ns3-193.akamaitech.net. 172800 IN AAAA 2600:1406:32::c1 ns4-193.akamaitech.net. 172800 IN AAAA 2600:1480:1::c1 ns4-193.akamaitech.net. 172800 IN A 84.53.139.193 ns1-1.akamaitech.net. 172800 IN A 193.108.88.1 ;; { "EDNS-VERSION": 0 }
	Found child zone akamai.net

akamai.net

	Checking DS between net and akamai.net
	Query to j.gtld-servers.net for akamai.net/DS
	Received 568 bytes from 192.48.79.30
	;; Response received from [192.48.79.30] 568 octets ;; HEADER SECTION ;; id = 32349 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 6 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamai.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (6 records) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN NSEC3 ( 1 1 0 - a1rtlnpgulogn7b9a62shje1u3ttp8dr NS SOA RRSIG DNSKEY NSEC3PARAM ) A1RT98BS5QGC9NFI51S9HCI47ULJG6JH.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240524065236 20240517054236 51809 net. WfKyMoQ6R04dwcyNmh/YG1Ahb8qSMGECDggXbDdcPJUeqXjLoB4NgGg/1+ev6NKoM1tuv6GY6Czt qp6vxijRZw== ) net. 900 IN SOA ( a.gtld-servers.net. nstld.verisign-grs.com. 1716008069 ;serial 1800 ;refresh 900 ;retry 604800 ;expire 86400 ;minimum ) net. 900 IN RRSIG ( SOA 13 1 900 20240525045429 20240518034429 51809 net. 3LkqUUSPqm5FZxf/64MyiHkZ7Nb4H2TJq/LbtXqcWIZl+yY7yrVouhk7SnVzzSFI0whhOzYMec+h G3Rl0ZbTEw== ) FA763KDSUQ0I5B94OID0KSLEO7UOGETS.net. 86400 IN NSEC3 ( 1 1 0 - fa781tlgr08gcs7n94lbdrb309gnnrpb NS DS RRSIG ) FA763KDSUQ0I5B94OID0KSLEO7UOGETS.net. 86400 IN RRSIG ( NSEC3 13 2 86400 20240522064522 20240515053522 51809 net. IDcI4wZSq8FyVtk05IHdq0UoP+AM2pqmzZTPdue2FuO7qvYEvbol2hYKQTNH9rotO8MC5JK897Uq Xml/5Kih+Q== ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for akamai.net in the net zone
	Query to ns3-193.akamaitech.net for akamai.net/DNSKEY
	Received 116 bytes from 23.61.199.193
	;; Response received from [23.61.199.193] 116 octets ;; HEADER SECTION ;; id = 48788 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamai.net. 180 IN SOA ( internal.akamaitech.net. hostmaster.akamai.com. 1698937200 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to ns1-1.akamaitech.net for a1808.dscb.akamai.net/A
	Received 374 bytes from 193.108.88.1
	;; Response received from [193.108.88.1] 374 octets ;; HEADER SECTION ;; id = 59264 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamai.net. 4000 IN NS n3dscb.akamai.net. dscb.akamai.net. 4000 IN NS n6dscb.akamai.net. dscb.akamai.net. 4000 IN NS n5dscb.akamai.net. dscb.akamai.net. 4000 IN NS n2dscb.akamai.net. dscb.akamai.net. 4000 IN NS n0dscb.akamai.net. dscb.akamai.net. 4000 IN NS n4dscb.akamai.net. dscb.akamai.net. 4000 IN NS n1dscb.akamai.net. dscb.akamai.net. 4000 IN NS n7dscb.akamai.net. ;; ADDITIONAL SECTION (10 records) n7dscb.akamai.net. 4000 IN A 23.46.150.47 n3dscb.akamai.net. 4000 IN A 23.62.6.181 n1dscb.akamai.net. 4000 IN A 23.46.15.21 n5dscb.akamai.net. 4000 IN A 23.45.233.20 n2dscb.akamai.net. 4000 IN A 23.62.6.191 n4dscb.akamai.net. 4000 IN A 23.62.6.183 n6dscb.akamai.net. 4000 IN A 23.45.233.44 n0dscb.akamai.net. 4000 IN AAAA 2600:1480:e800::c0 n0dscb.akamai.net. 4000 IN A 88.221.81.192 ;; { "EDNS-VERSION": 0 }
	Query to zc.akamaitech.net for dscb.akamai.net/DNSKEY
	Received 368 bytes from 23.74.25.192
	;; Response received from [23.74.25.192] 368 octets ;; HEADER SECTION ;; id = 24076 ;; qr = 1 aa = 0 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 8 arcount = 10 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (8 records) dscb.akamai.net. 4000 IN NS n2dscb.akamai.net. dscb.akamai.net. 4000 IN NS n7dscb.akamai.net. dscb.akamai.net. 4000 IN NS n6dscb.akamai.net. dscb.akamai.net. 4000 IN NS n3dscb.akamai.net. dscb.akamai.net. 4000 IN NS n1dscb.akamai.net. dscb.akamai.net. 4000 IN NS n5dscb.akamai.net. dscb.akamai.net. 4000 IN NS n4dscb.akamai.net. dscb.akamai.net. 4000 IN NS n0dscb.akamai.net. ;; ADDITIONAL SECTION (10 records) n4dscb.akamai.net. 4000 IN A 23.62.6.183 n0dscb.akamai.net. 4000 IN AAAA 2600:1480:e800::c0 n6dscb.akamai.net. 4000 IN A 23.45.233.44 n7dscb.akamai.net. 4000 IN A 23.46.150.47 n1dscb.akamai.net. 4000 IN A 23.46.15.21 n3dscb.akamai.net. 4000 IN A 23.62.6.181 n5dscb.akamai.net. 4000 IN A 23.45.233.20 n2dscb.akamai.net. 4000 IN A 23.62.6.191 n0dscb.akamai.net. 4000 IN A 88.221.81.192 ;; { "EDNS-VERSION": 0 }
	Found child zone dscb.akamai.net

dscb.akamai.net

	Checking DS between akamai.net and dscb.akamai.net
	Query to zh.akamaitech.net for dscb.akamai.net/DS
	Received 121 bytes from 23.211.133.192
	;; Response received from [23.211.133.192] 121 octets ;; HEADER SECTION ;; id = 54807 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN DS ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) akamai.net. 180 IN SOA ( internal.akamaitech.net. hostmaster.akamai.com. 1698937200 ;serial 90000 ;refresh 90000 ;retry 90000 ;expire 180 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DS records found for dscb.akamai.net in the akamai.net zone
	Query to n5dscb.akamai.net for dscb.akamai.net/DNSKEY
	Received 108 bytes from 23.45.233.20
	;; Response received from [23.45.233.20] 108 octets ;; HEADER SECTION ;; id = 31603 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008097 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	No DNSKEY records found
	Query to n5dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.45.233.20
	;; Response received from [23.45.233.20] 82 octets ;; HEADER SECTION ;; id = 53120 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.16 a1808.dscb.akamai.net. 20 IN A 23.218.218.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n5dscb.akamai.net is authoritative for a1808.dscb.akamai.net
	Query to n0dscb.akamai.net for a1808.dscb.akamai.net/DNSKEY
	Received 114 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 114 octets ;; HEADER SECTION ;; id = 46911 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008097 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n2dscb.akamai.net for dscb.akamai.net/SOA
	Received 108 bytes from 23.62.6.191
	;; Response received from [23.62.6.191] 108 octets ;; HEADER SECTION ;; id = 51595 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008097 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n0dscb.akamai.net for dscb.akamai.net/SOA
	Received 108 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 108 octets ;; HEADER SECTION ;; id = 4206 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n0dscb.akamai.net serial (1716008098) differs from n2dscb.akamai.net serial (1716008097)
	Query to n3dscb.akamai.net for dscb.akamai.net/SOA
	Received 108 bytes from 23.62.6.181
	;; Response received from [23.62.6.181] 108 octets ;; HEADER SECTION ;; id = 899 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n3dscb.akamai.net serial (1716008098) differs from n2dscb.akamai.net serial (1716008097)
	Query to n4dscb.akamai.net for dscb.akamai.net/SOA
	Received 108 bytes from 23.62.6.183
	;; Response received from [23.62.6.183] 108 octets ;; HEADER SECTION ;; id = 38386 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n4dscb.akamai.net serial (1716008098) differs from n2dscb.akamai.net serial (1716008097)
	Query to n7dscb.akamai.net for dscb.akamai.net/SOA
	Received 108 bytes from 23.46.150.47
	;; Response received from [23.46.150.47] 108 octets ;; HEADER SECTION ;; id = 58050 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n7dscb.akamai.net serial (1716008098) differs from n2dscb.akamai.net serial (1716008097)
	Query to n1dscb.akamai.net for dscb.akamai.net/SOA
	Received 108 bytes from 23.46.15.21
	;; Response received from [23.46.15.21] 108 octets ;; HEADER SECTION ;; id = 50036 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n1dscb.akamai.net serial (1716008098) differs from n2dscb.akamai.net serial (1716008097)
	Query to n6dscb.akamai.net for dscb.akamai.net/SOA
	Received 108 bytes from 23.45.233.44
	;; Response received from [23.45.233.44] 108 octets ;; HEADER SECTION ;; id = 63532 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 1 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; dscb.akamai.net. IN SOA ;; ANSWER SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n6dscb.akamai.net serial (1716008098) differs from n2dscb.akamai.net serial (1716008097)
	Query to n5dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.45.233.20
	;; Response received from [23.45.233.20] 82 octets ;; HEADER SECTION ;; id = 44558 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.14 a1808.dscb.akamai.net. 20 IN A 23.218.218.16 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1808.dscb.akamai.net A RR has value 23.218.218.14
	a1808.dscb.akamai.net A RR has value 23.218.218.16
	No RRSIGs found

dscb.akamai.net

	Query to n1dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.46.15.21
	;; Response received from [23.46.15.21] 82 octets ;; HEADER SECTION ;; id = 25100 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.16 a1808.dscb.akamai.net. 20 IN A 23.218.218.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n1dscb.akamai.net is authoritative for a1808.dscb.akamai.net
	Query to n0dscb.akamai.net for a1808.dscb.akamai.net/DNSKEY
	Received 114 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 114 octets ;; HEADER SECTION ;; id = 21958 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n1dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.46.15.21
	;; Response received from [23.46.15.21] 82 octets ;; HEADER SECTION ;; id = 39526 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.16 a1808.dscb.akamai.net. 20 IN A 23.218.218.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1808.dscb.akamai.net A RR has value 23.218.218.16
	a1808.dscb.akamai.net A RR has value 23.218.218.14
	No RRSIGs found

dscb.akamai.net

	Query to n0dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 82 octets ;; HEADER SECTION ;; id = 39563 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.14 a1808.dscb.akamai.net. 20 IN A 23.218.218.16 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n0dscb.akamai.net is authoritative for a1808.dscb.akamai.net
	Query to n0dscb.akamai.net for a1808.dscb.akamai.net/DNSKEY
	Received 114 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 114 octets ;; HEADER SECTION ;; id = 29932 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n0dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 88.221.81.192
	;; Response received from [88.221.81.192] 82 octets ;; HEADER SECTION ;; id = 39127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.14 a1808.dscb.akamai.net. 20 IN A 23.218.218.16 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1808.dscb.akamai.net A RR has value 23.218.218.14
	a1808.dscb.akamai.net A RR has value 23.218.218.16
	No RRSIGs found

dscb.akamai.net

	Query to n7dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.46.150.47
	;; Response received from [23.46.150.47] 82 octets ;; HEADER SECTION ;; id = 58800 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.14 a1808.dscb.akamai.net. 20 IN A 23.218.218.16 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n7dscb.akamai.net is authoritative for a1808.dscb.akamai.net
	Query to n6dscb.akamai.net for a1808.dscb.akamai.net/DNSKEY
	Received 114 bytes from 23.45.233.44
	;; Response received from [23.45.233.44] 114 octets ;; HEADER SECTION ;; id = 39671 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n7dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.46.150.47
	;; Response received from [23.46.150.47] 82 octets ;; HEADER SECTION ;; id = 22552 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.16 a1808.dscb.akamai.net. 20 IN A 23.218.218.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1808.dscb.akamai.net A RR has value 23.218.218.16
	a1808.dscb.akamai.net A RR has value 23.218.218.14
	No RRSIGs found

dscb.akamai.net

	Query to n2dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.62.6.191
	;; Response received from [23.62.6.191] 82 octets ;; HEADER SECTION ;; id = 36222 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.16 a1808.dscb.akamai.net. 20 IN A 23.218.218.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n2dscb.akamai.net is authoritative for a1808.dscb.akamai.net
	Query to n4dscb.akamai.net for a1808.dscb.akamai.net/DNSKEY
	Received 114 bytes from 23.62.6.183
	;; Response received from [23.62.6.183] 114 octets ;; HEADER SECTION ;; id = 20315 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n2dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.62.6.191
	;; Response received from [23.62.6.191] 82 octets ;; HEADER SECTION ;; id = 7388 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.14 a1808.dscb.akamai.net. 20 IN A 23.218.218.16 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1808.dscb.akamai.net A RR has value 23.218.218.14
	a1808.dscb.akamai.net A RR has value 23.218.218.16
	No RRSIGs found

dscb.akamai.net

	Query to n6dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.45.233.44
	;; Response received from [23.45.233.44] 82 octets ;; HEADER SECTION ;; id = 3898 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.14 a1808.dscb.akamai.net. 20 IN A 23.218.218.16 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n6dscb.akamai.net is authoritative for a1808.dscb.akamai.net
	Query to n6dscb.akamai.net for a1808.dscb.akamai.net/DNSKEY
	Received 114 bytes from 23.45.233.44
	;; Response received from [23.45.233.44] 114 octets ;; HEADER SECTION ;; id = 18940 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n6dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.45.233.44
	;; Response received from [23.45.233.44] 82 octets ;; HEADER SECTION ;; id = 20127 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.16 a1808.dscb.akamai.net. 20 IN A 23.218.218.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1808.dscb.akamai.net A RR has value 23.218.218.16
	a1808.dscb.akamai.net A RR has value 23.218.218.14
	No RRSIGs found

dscb.akamai.net

	Query to n3dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.62.6.181
	;; Response received from [23.62.6.181] 82 octets ;; HEADER SECTION ;; id = 54538 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.16 a1808.dscb.akamai.net. 20 IN A 23.218.218.14 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n3dscb.akamai.net is authoritative for a1808.dscb.akamai.net
	Query to n3dscb.akamai.net for a1808.dscb.akamai.net/DNSKEY
	Received 114 bytes from 23.62.6.181
	;; Response received from [23.62.6.181] 114 octets ;; HEADER SECTION ;; id = 1801 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n3dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.62.6.181
	;; Response received from [23.62.6.181] 82 octets ;; HEADER SECTION ;; id = 47450 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.14 a1808.dscb.akamai.net. 20 IN A 23.218.218.16 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1808.dscb.akamai.net A RR has value 23.218.218.14
	a1808.dscb.akamai.net A RR has value 23.218.218.16
	No RRSIGs found

dscb.akamai.net

	Query to n4dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.62.6.183
	;; Response received from [23.62.6.183] 82 octets ;; HEADER SECTION ;; id = 56963 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.14 a1808.dscb.akamai.net. 20 IN A 23.218.218.16 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	n4dscb.akamai.net is authoritative for a1808.dscb.akamai.net
	Query to n4dscb.akamai.net for a1808.dscb.akamai.net/DNSKEY
	Received 114 bytes from 23.62.6.183
	;; Response received from [23.62.6.183] 114 octets ;; HEADER SECTION ;; id = 63073 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 0 nscount = 1 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN DNSKEY ;; ANSWER SECTION (0 records) ;; AUTHORITY SECTION (1 record) dscb.akamai.net. 1000 IN SOA ( n0dscb.akamai.net. hostmaster.akamai.com. 1716008098 ;serial 1000 ;refresh 1000 ;retry 1000 ;expire 1800 ;minimum ) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	Query to n4dscb.akamai.net for a1808.dscb.akamai.net/A
	Received 82 bytes from 23.62.6.183
	;; Response received from [23.62.6.183] 82 octets ;; HEADER SECTION ;; id = 28543 ;; qr = 1 aa = 1 tc = 0 rd = 0 opcode = QUERY ;; ra = 0 z = 0 ad = 0 cd = 0 rcode = NOERROR ;; qdcount = 1 ancount = 2 nscount = 0 arcount = 1 ;; do = 1 ;; { "EDNS-VERSION": 0, ;; "FLAGS": "8000", ;; "RCODE": 0, ;; "UDPSIZE": 4096, ;; "OPTIONS": [ ] ;; } ;; QUESTION SECTION (1 record) ;; a1808.dscb.akamai.net. IN A ;; ANSWER SECTION (2 records) a1808.dscb.akamai.net. 20 IN A 23.218.218.14 a1808.dscb.akamai.net. 20 IN A 23.218.218.16 ;; AUTHORITY SECTION (0 records) ;; ADDITIONAL SECTION (1 record) ;; { "EDNS-VERSION": 0 }
	a1808.dscb.akamai.net A RR has value 23.218.218.14
	a1808.dscb.akamai.net A RR has value 23.218.218.16
	No RRSIGs found

Move your mouse over any or symbols for remediation hints.

Want a second opinion? Test www.bea.gov at dnsviz.net.

DNSSEC Debugger

↓ Advanced options ↑ Advanced options

Trust Anchor:
Name Servers: